(For websites etc I use a password manager.) Use pass phrases with many words but without any numbers or special characters. Likewise, I connect external encrypted disks on a regular basis and decrypt them with their passwords.Ģ. Meaning I’ll reboot machines and retype the passwords on a regular basis.
#PWSAFE 2 LOCKED KEYBOARD ON IPHONE FULL#
These days, any passwords that I use for full disk encryption I make sure toġ. I lost a fair bit of data that day, but it taught me a valuable lesson. Having not typed in the password in months, and at the time using the kind of passwords consisting of long word with a lot of numeric and symbolic substitutions, I was unable to decrypt the disks of my machines. These machines were powered on for a few months without reboots until one day when the power went out. Years ago, when I was in university, I had a couple of machines in my room running FreeBSD with full-disk encryption. > the “thing you know” could also be at risk. When things go wrong, digital shows its fragility. "Everything digital" is a marketing tool. I can't even wrap my brain around why you'd trust information this important to a rental computer a thousand miles away. That's why it's important to have your bank accounts with an actual bank, with actual branches, and actual human beings to help you when human being things go wrong in the real world. Memory is a normal skill that many people have lost or neglected. These days, we've allowed computers to think and remember for us (hello, Stackoverflow!) so we don't have to. If you're over 40, you can remember the days when it was perfectly ordinary to remember the phone numbers for dozens and dozens of people and businesses. You need your contact list to reach out to friends for help Depending on the disposition of the provider, I either told them I hadn't set up e-mail yet since I moved, or just a flat "no." I gave my e-mail address to none of them. I recently moved to a new city, and setting up utilities, dry cleaning service, parking garage, etc. I had a roof replaced in my last place, which involved multiple contractors and insurance companies. People have been trained to think they need an e-mail address for real-life things, but they don't. You need an e-mail address to arrange contractors In this case, I would avoid a cipher or something else you’re likely to forget. Finding a secure way to store a master password in the event you cannot recall it, or perhaps in the event of your death, is something you may also consider. You might also consider it’s not necessarily the “thing you have” that might go MIA, but due to physical injury, age, or just forgetfulness, the “thing you know” could also be at risk. To whatever degree you obfuscate or complicate your recovery path, you also increase the risk of losing access to it yourself.
The how likely depends on your threat model, several people on this site may find it insufficient. If you’re worried about keeping a master key to your life in a single place, you could separate your data and your authenticator. A safety deposit box or other offsite location that you can frequently refresh and keep up to date would be a good investment. That said, planning a strategy for offsite data storage or a secondary authenticator is of course wise. Second, if you had actually suffered such a loss, your digital life would hopefully be the last thing on your mind, and you’d just be glad to have your life and your family - the only real things that matter in this world. First, I’m so glad this turned out to be hypothetical, and you didn’t have to suffer through such a catastrophic loss.
0 kommentar(er)
